skills/openai/skills/vercel-deploy/Gen Agent Trust Hub

vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill invokes system commands such as vercel deploy and runs a local bash script (deploy.sh) to automate the deployment process.
  • This behavior is necessary for packaging projects and executing CLI tools, which is typical for development and deployment utilities.
  • External Network Interaction: The backup deployment script utilizes curl to transmit project files to a remote endpoint (https://codex-deploy-skills.vercel.sh/api/deploy) for processing and hosting.
  • This communication is aligned with the core function of publishing assets to a cloud provider. Notably, the script implements standard security practices by explicitly filtering out sensitive local files such as .env, .env.*, and .git directories before packaging.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:35 PM
Security Audit — agent-trust-hub — vercel-deploy